AWWA Championing New Cybersecurity Legislation for Water Sector Resilience
On April 14, 2025, the American Water Works Association (AWWA) publically backed a significant piece of legislation designed to bolster cybersecurity in the water industry. This newly introduced bill, known as the Water Risk and Resilience Organization (WRRO) Establishment Act (H.R. 2594), was put forward in the U.S. House of Representatives on April 2. It aims to create an independent and collaborative framework for developing cybersecurity requirements specifically for the water sector, all under the monitoring of the U.S. Environmental Protection Agency (EPA).
This progressive initiative reflects AWWA's commitment to addressing the growing threats posed by cyber-attacks that jeopardize water supply systems. According to AWWA’s CEO, David LaFrance, the legislation is crucial for ensuring that cybersecurity measures are not only comprehensive but also tailored to the unique challenges that the water sector faces. LaFrance stated, "This bill represents exactly the kind of thoughtful collaboration we need to address a very serious threat to our nation's water systems." He emphasized that pooling the expertise of cybersecurity professionals and utility leaders will lead to more efficient protection of water infrastructures and enhance public trust.
The rising frequency and sophistication of cyber threats against critical infrastructure highlight the necessity for the water sector to adapt to these vulnerabilities. The WRRO Establishment Act aims to ensure that professionals with expertise in cybersecurity participate in the formulation of relevant requirements, essentially empowering them to articulate specific needs that consider the diversity among water utilities. As noted by LaFrance, a universal one-size-fits-all cybersecurity strategy would impose significant challenges, particularly for smaller water entities that often lack the resources to implement such standards effectively.
Around 200 AWWA members participated in discussions on Capitol Hill last week to advocate for the WRRO Establishment Act and address other pressing water-related issues during the annual AWWA Water Matters Fly-In. During these exchanges, it became clear that AWWA members value collaboration and seek a proactive stance against the various threats to water security.
The WRRO's collaborative structure aims to bring utility professionals into the conversation about developing cybersecurity requirements. This is vital for reflecting the complexities and differences prevalent in the water sector, from large metropolitan utilities to smaller rural systems. By ensuring that these voices are heard, the legislation seeks to create customized solutions that cater to the varying capabilities of water providers across the country.
AWWA’s efforts are part of a longstanding advocacy for a collaborative approach to cybersecurity, recognizing the critical link between public health, economic sustainability, and the prevention of cyber incidents that could disrupt water services. The organization openly expressed gratitude for the visionary leadership of Rep. Rick Crawford (R-AR), who sponsored the introduction of the WRRO Establishment Act. LaFrance noted, "We look forward to working with Rep. Crawford and many other leaders in Congress to advance the bill."
Since its establishment in 1881, the American Water Works Association has grown to become the largest nonprofit entity devoted to the management and treatment of water, which is considered the world's most essential resource. With approximately 50,000 members, AWWA strives to provide practical solutions to improve public health, uplift environmental standards, bolster economic resilience, and enhance quality of life for communities across the United States. AWWA’s endorsement of this legislation underscores its commitment to protecting our vital water systems in an era where cybersecurity is becoming increasingly indispensable.
In summary, as this legislation moves forward, it signifies a step toward enhanced resilience in the water sector against cyber threats while promoting a collaborative environment where expertise and practical knowledge contribute to the establishment of sound cybersecurity practices. For those invested in the safety and security of critical water infrastructures, the WRRO Establishment Act represents a promising development that aims to protect public health and support national security.
This collaborative approach is essential as we advance into a more digitized future, where the reliability of utilities profoundly impacts both individual lives and wider societal health. The journey toward enhancing cyber defenses within our water systems is just beginning, and the proactive stance taken by AWWA signals hope for more robust protective measures in the future.